CVE-2015-6943

SQL injection vulnerability in the serendipitycheckCommentToken function in include/functionscomments.inc.php in Serendipity before 2.0.2, when "Use Tokens for Comment Moderation" is enabled, allows remote administrators to execute arbitrary SQL commands via the serendipityid parameter to...

Sql injection

SQL injection vulnerability in the serendipitycheckCommentToken function in include/functionscomments.inc.php in Serendipity before 2.0.2, when "Use Tokens for Comment Moderation" is enabled, allows remote administrators to execute arbitrary SQL commands via the serendipityid parameter to...

CVE-2015-6943

Serendipity (PHP-based blogging system) versions before 2.0.2 are affected by an SQL injection in serendipity_checkCommentToken (include/functions_comments.inc.php). When the "Use Tokens for Comment Moderation" option is enabled, the issue allows remote administrators to execute arbitrary SQL com...

CVE-2015-6921

Cross-site scripting XSS vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators with the "Configure Zendesk Feedback Tab" permission to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators with the "Configure Zendesk Feedback Tab" permission to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication of administrators...

CVE-2015-5631

The CVE-2015-5631 issue affects Canon PIXMA MG7500 Series printers and specifically the Remote UI. The vulnerability is a Cross‑Site Request Forgery (CSRF) that lets remote attackers hijack administrator sessions when a user views a malicious page while logged into the Remote UI, enabling uninten...

CVE-2015-5631

Cross-site request forgery CSRF vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authentication of administrators...

CVE-2015-6921: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators with the "Configure Zendesk Feedback Tab" permission to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-7405

Name of the Vulnerable Software and Affected Versions Zendesk Feedback Tab module versions 7.x-1.x before 7.x-1.1 Description The issue is related to a cross-site scripting XSS vulnerability. This allows remote administrators with the "Configure Zendesk Feedback Tab" permission to inject arbitrar...

WordPress Easy Media Gallery 1.3.47 Cross Site Scripting

Exploit : For Exploiting This Vulnerability Install Easy Media Gallery Plugin Then Create New Media In Media Title Input : "/alert'Exploit' Then In Media Subtitle Like Media Title Input : "/alert'Exploit1' After Creating New JavaScript Code Will Be Executed . Video Poc : http://youtu.be/5nMQUgP6n...

Microsoft Releases September 2015 Security Bulletin

Microsoft has released 12 updates to address vulnerabilities in Microsoft Windows. Exploitation of some of these vulnerabilities could allow an attacker to take control of an affected system. US-CERT encourages users and administrators to review Microsoft Security Bulletins MS15-094 through...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action...

CVE-2015-6545

CVE-2015-6545: A CSRF flaw in Cerb (Webgroup Media LLC) affects the ajax.php endpoint, enabling an authenticated attacker to add an administrator account via the saveWorkerPeek action. Affected version(s): Cerb 7.0.3 and likely earlier; fixed in Cerb 7.0.4. Impact: unauthorized creation of admin ...

CVE-2015-6545

Cross-site request forgery CSRF vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action...

Internet Systems Consortium (ISC) Releases Security Updates for BIND

ISC has released security updates to address vulnerabilities in BIND. Exploitation of these vulnerabilities may allow a remote attacker to cause a denial-of-service condition. Available updates include: BIND 9 version 9.9.7-P3 BIND 9 version 9.10.2-P4 Users and administrators are encouraged to...

Google Releases Security Update for Chrome

Google has released Chrome version 45.0.2454.85 to address multiple vulnerabilities for Windows, Mac, and Linux. Exploitation of one of these vulnerabilities may allow an attacker to take control of an affected system. US-CERT encourages users and administrators to review the Chrome Releases page...

CVE-2015-6655

Cross-site request forgery CSRF vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/adminusers.php...

CVE-2015-6535

Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...

CVE-2015-6535

Cross-site scripting XSS vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML via the Profile name field youtubeembedname parameter...